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Appriss Health - PMP Solutions and SOC 2 


SOC 2 is a report based on AlCPA's existing Trust Services principles and criteria. The purpose of 
the SOC 2 report is to evaluate an organization's information systems relevant to security, 
availability, processing integrity, and confidentiality or privacy. 

The Appriss Health PMP solutions leverage Amazon Web Services (AWS) as their deployment 
platform. Security and Compliance is a shared responsibility between AWS and Appriss. Appriss 
Health has architected our system to meet HIPAA Security and Compliance using AWS best 
practices. 

Application-level controls and Appriss processes are reviewed annually through a 3rd-party 
HIPAA assessment. The executive summary of which is available in our compliance package. 

AWS has undergone extensive certification and attestation, including SOC and ISO. A full copy 
of the AWS SOC2 report is available through the Appriss-AWS Account Management team 
under NDA or through the AWS Artifact Self Service Portal for existing customer. 

Below are links that describe the AWS accreditations and processes. 

If the full AWS SOC2 report is required, we can work with your organization to establish an NDA 
with AWS for the dissemination of the report. 

https://aws.amazon.com/compliance/shared-responsibility-model/ 

https://aws.amazon.com/compliance/ 

https://aws.amazon.com/compliance/soc-faqs/ 

https://dl.awsstatic.com/whitepapers/compliance/AWS_SOC3.pdf 

https://aws.amazon.com/compliance/services-in-scope/ 

https://dl.awsstatic.com/certifications/iso_27001_global_certification.pdf 
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